 remmons-r7
|
e9070e3472
|
crushftp_authbypass_cve_2025_2825.md
|
2025-04-02 20:06:57 -05:00 |
|
|
jheysel-r7
|
d16eeab32c
|
Merge pull request #19995 from chutton-r7/cve-2025-24813
Module for CVE-2025-24813
|
2025-04-02 14:20:52 -07:00 |
|
|
Jack Heysel
|
b85faf9440
|
Update documentation
|
2025-04-02 14:10:46 -07:00 |
|
|
Jack Heysel
|
6816589378
|
Added FileDropper for cleanup
|
2025-04-02 13:37:39 -07:00 |
|
|
Jack Heysel
|
fefb954827
|
Correct Tomcat version listed in Scenarios section
|
2025-04-02 13:02:26 -07:00 |
|
|
Jack Heysel
|
4058173a1c
|
Correct spelling
|
2025-04-02 12:57:20 -07:00 |
|
|
sfewer-r7
|
b44540bc35
|
update docs to give some more detail on the testing setup
|
2025-04-02 20:51:39 +01:00 |
|
|
Jack Heysel
|
1e58d419f6
|
Updated docs, added Setup steps
|
2025-04-02 12:03:21 -07:00 |
|
|
sfewer-r7
|
dc74b37577
|
add in a scenario for the Unix Command target to the docs
|
2025-04-02 15:32:18 +01:00 |
|
|
chutton-r7
|
917aaeb027
|
Add module docs
|
2025-04-02 10:22:01 +01:00 |
|
|
jheysel-r7
|
ca3c4a1362
|
Merge branch 'master' into get_naa_creds_via_relay
|
2025-04-01 09:34:35 -07:00 |
|
|
sfewer-r7
|
c5d3512659
|
update docs
|
2025-04-01 13:05:28 +01:00 |
|
|
sfewer-r7
|
acafd884b5
|
add in the initial exploit for CVE-2021-35587, only tested on 12.2.1.4.0 so far.
|
2025-04-01 12:56:38 +01:00 |
|
|
sjanusz-r7
|
2b0d9b4971
|
Add OPNSense Login Scanner module
|
2025-03-31 14:57:44 +01:00 |
|
|
jheysel-r7
|
e841a45db2
|
Merge pull request #19985 from sjanusz-r7/add-pfsense-login-scanner
Add pfSense Login Scanner module
|
2025-03-28 11:12:43 -07:00 |
|
|
jheysel-r7
|
5505bb5ef1
|
Merge pull request #19947 from machang-r7/machang-r7-module-cve-2025-27218
Create sitecore_xp_cve_2025_27218.rb
|
2025-03-28 07:40:28 -07:00 |
|
|
sjanusz-r7
|
b5ef4cdd6f
|
Add pfSense login scanner docs
|
2025-03-28 11:35:56 +00:00 |
|
|
Diego Ledda
|
985cea3278
|
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-2023-36969)
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-2023-36969)
|
2025-03-28 12:24:30 +01:00 |
|
|
jheysel-r7
|
08e227faca
|
Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce
Improve exploit/linux/misc/cisco_ios_xe_rce (CVE-2023-20198 + CVE-2023-20273)
|
2025-03-27 16:51:16 -07:00 |
|
|
Jack Heysel
|
fa0c29837e
|
Update author, rubocop, msftidy_docs
|
2025-03-27 09:36:10 -07:00 |
|
|
Jack Heysel
|
74cc1d313c
|
Add documentation
|
2025-03-27 09:28:44 -07:00 |
|
|
tastyrce
|
8479350b3e
|
Update documentation
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com>
|
2025-03-28 03:17:47 +11:00 |
|
|
tastyrce
|
8423d6ff87
|
Update removal of default page while installation
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-03-27 22:11:21 +11:00 |
|
|
tastyrce
|
9bdff3e803
|
Add extra dependencies during installation
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-03-27 22:10:32 +11:00 |
|
|
jheysel-r7
|
26869588db
|
Merge pull request #19987 from zeroSteiner/fix/mod/ivanti-login
Update the Ivanti and Sonicwall Bruteforce modules
|
2025-03-26 15:06:10 -07:00 |
|
|
Spencer McIntyre
|
30d071e098
|
Make the same changes for sonicwall
|
2025-03-26 17:25:13 -04:00 |
|
|
Spencer McIntyre
|
7476ea9006
|
Brute force modules should be named service_login
|
2025-03-26 16:14:16 -04:00 |
|
|
Diego Ledda
|
9c42bdd103
|
Land #19974, GLPI Inventory Plugin Unauth Blind Boolean SQLi (CVE-2025-24799)
Land #19974, GLPI Inventory Plugin Unauth Blind Boolean SQLi (CVE-2025-24799)
|
2025-03-25 19:45:54 +01:00 |
|
|
Spencer McIntyre
|
bf1f919d9f
|
Merge pull request #19957 from msutovsky-r7/auxmodule-eramba-update
Auxmodule eramba update
|
2025-03-25 13:54:24 -04:00 |
|
|
tastyrce
|
162e73a62e
|
add module documentation
|
2025-03-22 04:57:38 -04:00 |
|
|
jheysel-r7
|
b3de2516bd
|
Merge branch 'master' into get_naa_creds_via_relay
|
2025-03-21 10:43:20 -07:00 |
|
|
Jack Heysel
|
cde6034614
|
Account for all vulnerable version DB schemas
|
2025-03-20 13:09:17 -07:00 |
|
|
Martin Sutovsky
|
d922976ea4
|
Adding more clear installation steps
|
2025-03-20 19:54:57 +01:00 |
|
|
Martin Sutovsky
|
df027f3fdd
|
Update documentation, adding more precise check, removing unnecessary characters
|
2025-03-20 15:18:55 +01:00 |
|
|
bwatters-r7
|
ec67435de9
|
Rebase and squash for CVE-2024-30085
|
2025-03-20 09:03:28 -05:00 |
|
|
Jack Heysel
|
e3d9561be1
|
GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi (CVE-2025-24799)
|
2025-03-19 12:50:40 -07:00 |
|
|
Christophe De La Fuente
|
d4fd890fed
|
Add the smb_to_ldap relay module and documentation
|
2025-03-14 15:28:39 +01:00 |
|
|
msutovsky-r7
|
9961bfbc58
|
Land #19950, module for InvoiceShelf unauthenticated PHP deserialization
InvoiceShelf unauthenticated PHP deserialization vulnerability [CVE-2024-55556]
|
2025-03-14 10:21:56 +01:00 |
|
|
Jack Heysel
|
fdf4531c10
|
Add SMB to HTTP relay support for get_naa_creds
|
2025-03-13 10:59:59 -07:00 |
|
|
Martin Sutovsky
|
9886f78575
|
Upgrade Eramba RCE module
|
2025-03-13 12:34:50 +01:00 |
|
|
h00die-gr3y
|
e341398871
|
small update on module and documentation
|
2025-03-10 19:35:37 +00:00 |
|
|
H00die.Gr3y
|
44bdc5b44f
|
Update documentation/modules/exploit/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.md
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-03-10 19:29:12 +01:00 |
|
|
h00die-gr3y
|
281b728000
|
initial module and documentation
|
2025-03-07 17:34:22 +00:00 |
|
|
sfewer-r7
|
efb0d5da4c
|
fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and not IOS-XE.
|
2025-03-04 09:09:32 +00:00 |
|
|
Martin Sutovsky
|
8d7bbdd84f
|
Sonicwall module
|
2025-03-04 08:20:22 +01:00 |
|
|
jheysel-r7
|
b1d0eedc26
|
Merge pull request #19712 from smashery/naa_creds
NAA creds from SCCM
|
2025-03-03 13:50:31 -08:00 |
|
|
sfewer-r7
|
edd36a8182
|
update the docs for exploit/linux/misc/cisco_ios_xe_rce after retesting the changes
|
2025-03-03 20:39:53 +00:00 |
|
|
sfewer-r7
|
45dfa5fda9
|
update docs for auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_20198 to show it working on C1000v and C8000v targets.
|
2025-03-03 20:23:55 +00:00 |
|
|
sfewer-r7
|
e71a851e3f
|
mention that the C8000v series appliance version 17.6.5 was observed to not be vulnerable to CVE-2023-20273. Inspecting the Lua code shows this appliance has additional command injection filtering in place (see pexec_setsid in /usr/binos/openresty/nginx/conf/pexec.lua) which prevents the injection from working
|
2025-03-03 20:22:46 +00:00 |
|
|
msutovsky-r7
|
3c4d0aae2f
|
Land #19899, D-Tale remote code execution module
Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)
|
2025-03-03 13:04:45 +01:00 |
|